PT-2004-2031
CVE-2004-1036
·
تاريخ النشر
2004-11-16
·
تاريخ التحديث
2017-10-11
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
SquirrelMail versions 1.4.3a and earlier
SquirrelMail versions 1.5.1-cvs before 23rd October 2004
Description:
A cross-site scripting (XSS) issue exists in the decoding of encoded text in certain headers in mime.php, allowing remote attackers to execute arbitrary web script or HTML.
Recommendations:
For SquirrelMail versions 1.4.3a and earlier, update to a version later than 1.4.3a.
For SquirrelMail versions 1.5.1-cvs before 23rd October 2004, update to a version from 23rd October 2004 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾